DemoBook a demo

Vulnerability advisory

CVE-2022-23833

Published Updated OSV record ↗

Also known as BIT-django-2022-23833GHSA-6cw3-g6wv-c2xvPYSEC-2022-20

Severity

Severity not reported.

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/django/django ↗
2a62cdcfec85938f40abb2e9e6a9ff497e02afe8 to before e541f2d05b88e58c18b82b622aacc38d670eb5f6e541f2d05b88e58c18b82b622aacc38d670eb5f6
3591e1c1acbd7c13174275367c3fdf012cb0413b to before fdf209eab8949ddc345aa0212b349c79fc6fdebbfdf209eab8949ddc345aa0212b349c79fc6fdebb
ef62a3a68c9d558486145a42c0d71ea9a76add9e to before b12be7ad6b83ffc512252953ef28d0d099f96ad7b12be7ad6b83ffc512252953ef28d0d099f96ad7
Not specifiedc477b761804984c932704554ad35f78a2e230c6a
Not specifiedd16133568ef9c9b42cb7a08bdf9ff3feec2e5468
Not specifiedf9c7d48fdd6f198a6494a9202f90242f176e4fc9

Description

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing files.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.